Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: Sneaky 2FA Toolkit Upgraded: Uses ‘Browser-in-the-Browser’ to Steal Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:57:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Browser In The Browser #Credential Theft #cybersecurity #Microsoft Phishing #phishing #Push Security #Sneaky 2FA #Social Engineering
Penetration Testing Tools
Sneaky 2FA Toolkit Upgraded: Uses 'Browser-in-the-Browser' to Steal Credentials
The Sneaky 2FA phishing toolkit now uses the Browser-in-the-Browser technique to create highly convincing fake login windows, making credential theft easier.
53 views
Daily Writeups
⤷ Title: LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:53:48 +0000
════════════════════════
⌗ Tags: #Data Leak #Akira Ransomware #Battery Manufacturer #cyber attack #Data Theft #Extortion #FBI Advisory #LG Energy Solution #LG Energy Solution confirmed an overseas facility was hit by a cyber attack; the Akira ransomware group claims to have stolen a massive 1.7 TB of internal data. #Manufacturing Security
Penetration Testing Tools
LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data
LG Energy Solution confirmed an overseas facility was hit by a cyber attack; the Akira ransomware group claims to have stolen a massive 1.7 TB of internal data.
34 views
Daily Writeups
⤷ Title: Samsung AppCloud Sparks Privacy Fear: Accused of Being ‘Undeletable Spyware’
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:51:17 +0000
════════════════════════
⌗ Tags: #Malware #Android #AppCloud #Digital Rights #ironSource #pre_installed apps #Privacy Concern #Samsung Galaxy #Spyware #System Permissions
Penetration Testing Tools
Samsung AppCloud Sparks Privacy Fear: Accused of Being 'Undeletable Spyware'
Controversy hits Samsung's budget Galaxy phones over the pre-installed AppCloud service (from ironSource), which critics label "undeletable spyware" with system-level access.
25 views
Daily Writeups
⤷ Title: Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:29:05 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bot Management #Cloudflare #cybersecurity #DDoS protection #internet infrastructure #Outage #Security Perimeter #Single Point of Failure
Penetration Testing Tools
Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps
A database error in Cloudflare's Bot Management system caused a global outage, forcing sites to run without security filtering and renewing single point of failure risks.
29 views
Daily Writeups
⤷ Title: Xubuntu Download Page Hacked: Malicious File Distributed for Several Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:22:59 +0000
════════════════════════
⌗ Tags: #Malware #Brute Force Attack #Canonical #Download Page #Linux distribution #malware #security incident #WordPress Vulnerability #Xubuntu
Penetration Testing Tools
Xubuntu Download Page Hacked: Malicious File Distributed for Several Days
The Xubuntu download page was compromised via a WordPress brute-force attack, leading to the distribution of a malicious file for four days. The site is now secured.
25 views
Daily Writeups
⤷ Title: New Sturnus Android Trojan Bypasses Signal/WhatsApp Encryption, Seizes Full Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:15:05 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #banking trojan #Encryption Bypass #mobile security #Overlay Attack #Signal #Sturnus #ThreatFabric #VNC #WhatsApp
Penetration Testing Tools
New Sturnus Android Trojan Bypasses Signal/WhatsApp Encryption, Seizes Full Control
Sturnus is a new Android banking trojan that captures decrypted Signal/WhatsApp messages, performs overlay attacks, and uses VNC for full, remote device takeover.
35 views
Daily Writeups
⤷ Title: MEMINSPECT Proposed for Linux Kernel: Simplifies Memory Debugging & Post-Mortem Analysis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:11:53 +0000
════════════════════════
⌗ Tags: #Linux #embedded systems #Kernel Development #Linaro #Linux Kernel #LKML #MEMINSPECT #Memory Debugging #Post_Mortem Analysis
Penetration Testing Tools
MEMINSPECT Proposed for Linux Kernel: Simplifies Memory Debugging & Post-Mortem Analysis
The MEMINSPECT mechanism has been proposed for the Linux kernel to simplify memory analysis in constrained systems, enabling reduced post-mortem memory dumps.
59 views
Daily Writeups
⤷ Title: Google Cracks AirDrop: Pixel 10 Enables Seamless File Sharing with iPhone
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 08:59:54 +0000
════════════════════════
⌗ Tags: #Android #Google #AirDrop #Apple #File Transfer #Interoperability #ios #Pixel 10 #Quick Share #Tech News #Walled Garden
Penetration Testing Tools
Google Cracks AirDrop: Pixel 10 Enables Seamless File Sharing with iPhone
Google unilaterally enabled Quick Share/AirDrop interoperability on the Pixel 10, allowing seamless two-way file transfers with iPhones and Macs. The future of sharing is here!
59 views
Daily Writeups
⤷ Title: BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:32:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BitlockMove #COM Hijacking #cybersecurity #DCOM #Defensive Telemetry #Lateral Movement #Proof of Concept #Red Team #Windows Security
Penetration Testing Tools
BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking
"BitlockMove" PoC demonstrates a novel lateral movement technique abusing BitLocker DCOM/COM hijacking to execute code in a logged-in user's session without credential theft.
49 views
Daily Writeups
⤷ Title: AMD Patches Hint at Next-Gen RDNA 5 or Enhanced GPU Architecture in Linux Driver
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:27:51 +0000
════════════════════════
⌗ Tags: #Linux #Technology #AMD #AMDGPU #GFXHUB 12.1 #GPU #Hardware News #Kernel Development #Linux driver #RDNA 4 #RDNA 5
Penetration Testing Tools
AMD Patches Hint at Next-Gen RDNA 5 or Enhanced GPU Architecture in Linux Driver
AMD is adding support for mysterious new GPUs (GFXHUB 12.1) to the Linux driver, suggesting either a refined RDNA 4 design or the unannounced next-gen RDNA 5/UDNA architecture.
54 views
Daily Writeups
⤷ Title: Microsoft Integrates Sysmon Natively into Windows 11 & Server 2025
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:25:18 +0000
════════════════════════
⌗ Tags: #Windows #Incident Response #Microsoft #Secure Future Initiative #Security Telemetry #security tool #SIEM #Sysmon #Windows 11 #Windows Server 2025
Penetration Testing Tools
Microsoft Integrates Sysmon Natively into Windows 11 & Server 2025
Sysmon capabilities are now natively integrated into Windows 11 and Server 2025, providing built-in security telemetry for process and network monitoring via Windows Update.
47 views
Daily Writeups
⤷ Title: Operation WrtHug: 50,000+ Outdated ASUS Routers Hacked for Covert Botnet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:22:52 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AiCloud #ASUS Routers #BOTNET #China APT #cyber attack #network security #Outdated Firmware #SecurityScorecard #WrtHug
Penetration Testing Tools
Operation WrtHug: 50,000+ Outdated ASUS Routers Hacked for Covert Botnet
Operation WrtHug compromised over 50,000 outdated ASUS routers (RT-AC, DSL-AC series) using old flaws to build a covert botnet, likely linked to Chinese threat actors.
60 views
Daily Writeups
⤷ Title: FortiWeb Alert: New Authenticated Command Injection Flaw (CVE-2025-58034) Actively Exploited
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:19:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Command Injection #CVE_2025_58034 #Fortinet #FortiWeb #network security #Patch #RCE #vulnerability
Penetration Testing Tools
FortiWeb Alert: New Authenticated Command Injection Flaw (CVE-2025-58034) Actively Exploited
Fortinet confirms a new, actively exploited command injection flaw (CVE-2025-58034) in FortiWeb, which CISA mandates be patched within 7 days. Update immediately!
91 views
Daily Writeups
⤷ Title: Urgent Patch: 7-Zip Flaw (CVE-2025-11001) Actively Exploited for Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:18:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #7_Zip #CVE_2025_11001 #remote code execution #Security Advisory #Symlink #vulnerability #windows #ZIP File
Penetration Testing Tools
Urgent Patch: 7-Zip Flaw (CVE-2025-11001) Actively Exploited for Code Execution
NHS Digital warns that a high-severity 7-Zip symbolic link flaw (CVE-2025-11001) is being actively weaponized to execute arbitrary code. Update to 7-Zip 25.00 now!
82 views
Daily Writeups
⤷ Title: ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:14:07 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AI Cluster #Cryptojacking #CVE_2023_48022 #cybersecurity #GPU Mining #misconfiguration #Ray Framework #RCE #ShadowRay
Penetration Testing Tools
ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking
The ShadowRay 2.0 campaign exploits the unauthenticated Ray Jobs API (CVE-2023-48022) in over 200,000 exposed instances to deploy a self-propagating cryptomining botnet.
117 views
Daily Writeups
⤷ Title: Google Brings AirDrop Compatibility to Android’s Quick Share Using Rust-Hardened Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 18:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
❤1
106 views
Daily Writeups
⤷ Title: Why IT Admins Choose Samsung for Mobile Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
108 views
Daily Writeups
⤷ Title: APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 16:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
99 views
Daily Writeups
⤷ Title: Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 21:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
87 views
Daily Writeups
⤷ Title: ShinyHunters Breach Gainsight Apps on Salesforce, Claim Data from 1000 Firms
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 15:24:13 +0000
════════════════════════
⌗ Tags: #Hacking News #Security #Cyber Attack #Cybersecurity #data breach #Gainsight #Privacy #Salesforce #ShinyHunters
Hackread
ShinyHunters Breach Gainsight Apps on Salesforce, Claim Data from 1000 Firms
ShinyHunters breached Gainsight apps integrated with Salesforce, claiming access to data from 1000 firms using stolen credentials and compromised tokens.
102 views